Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft
File: yErFLitXLMKpmnQSV-VpqjceNWg.mft (raw, json)
Hash identifier: Mu9fDg3WWzXWW2L+QJfeTG+ewaTDd1DXeqK+8MR9Uvk=
Subject key identifier: 9E:4B:28:8F:AF:45:B8:3A:80:76:EF:E3:4D:83:05:E5:29:BE:5C:10
Authority key identifier: C8:4A:C5:2E:2B:57:2C:C2:A9:9A:74:12:57:E5:69:AA:37:1E:35:68
Certificate issuer: /CN=c84ac52e2b572cc2a99a741257e569aa371e3568
Certificate serial: 0199FE472E3641FB6E1B758470EB4DAA7C75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yErFLitXLMKpmnQSV-VpqjceNWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft
Manifest number: 0F6C
Signing time: Sun 19 Oct 2025 21:01:41 +0000
Manifest this update: Sun 19 Oct 2025 21:01:41 +0000
Manifest next update: Mon 20 Oct 2025 21:01:41 +0000
Files and hashes: 1: Ki24jPZgJrCPTdr-EzJOC_g3W_g.roa (hash: n4ZbZmzZFlutTnq+BcgW8yw5bghHlIwLiglxRYnEDAw=)
2: yErFLitXLMKpmnQSV-VpqjceNWg.crl (hash: bsRdBl7jIWkIzghJDIzlBMJ8wy8tDdZGz0YiuYYQLrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yErFLitXLMKpmnQSV-VpqjceNWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:2e:36:41:fb:6e:1b:75:84:70:eb:4d:aa:7c:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84ac52e2b572cc2a99a741257e569aa371e3568
Validity
Not Before: Oct 19 21:01:41 2025 GMT
Not After : Oct 20 21:01:41 2025 GMT
Subject: CN=9e4b288faf45b83a8076efe34d8305e529be5c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cc:a1:ee:9a:3f:f5:db:3e:ff:72:26:32:67:
77:b1:b6:9f:c4:c7:1a:81:da:54:dc:57:8e:19:d5:
52:7f:18:c5:ba:2f:75:16:0f:8d:15:cc:4a:c6:9f:
b0:32:ae:fd:d9:d0:86:61:af:f6:ba:25:eb:0d:3d:
94:fc:b9:94:4a:df:3c:2d:94:72:35:0a:2f:1b:34:
27:b0:24:d9:2a:07:3a:40:c4:35:33:97:fb:fe:fd:
3d:12:21:dd:0a:28:3f:4c:c5:b1:7b:cf:23:0c:9f:
c2:56:37:f4:cb:73:01:e0:63:84:e1:5b:2d:09:1c:
dc:8d:c9:07:bd:c3:dc:9c:c0:c7:26:f5:d9:ee:6f:
db:03:fa:e4:ac:99:d1:ab:73:07:10:ec:d9:b4:76:
7d:dd:01:57:b7:49:f1:f7:cb:99:a4:9d:8a:17:07:
2f:1b:26:8a:a2:4b:34:2b:a8:6c:23:bd:6b:74:1b:
79:73:77:eb:b6:91:eb:04:11:e0:bf:e6:6b:fd:e0:
79:22:2f:ce:5d:9f:6a:82:f9:5e:b4:4f:65:54:91:
9c:e9:af:57:11:85:f7:ba:e8:9c:7d:5a:15:0a:4b:
09:6d:f8:46:aa:ef:c4:5b:f2:21:fe:73:dd:34:c9:
eb:23:88:ca:92:7b:04:7f:fe:b8:52:78:26:fc:fa:
81:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:4B:28:8F:AF:45:B8:3A:80:76:EF:E3:4D:83:05:E5:29:BE:5C:10
X509v3 Authority Key Identifier:
keyid:C8:4A:C5:2E:2B:57:2C:C2:A9:9A:74:12:57:E5:69:AA:37:1E:35:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yErFLitXLMKpmnQSV-VpqjceNWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:e5:0d:a9:41:2f:f5:c5:d4:b1:2a:e1:83:1f:44:96:44:b8:
59:15:a0:1f:12:a8:36:78:d3:d9:aa:c6:e4:ae:be:94:04:14:
53:59:bc:a1:52:ca:f3:95:f4:17:be:93:bb:5a:bc:a8:11:19:
b0:a4:db:cb:22:27:43:5b:85:f5:ce:8f:b9:4a:8c:29:c0:43:
d2:a3:9d:55:2f:94:94:6c:e7:87:8f:6b:f9:1d:e0:af:e1:d7:
58:0a:b8:f6:b6:5f:23:dd:bb:f3:a7:23:b0:d3:8b:7d:80:8c:
3e:7a:f3:bc:92:c8:04:b3:f9:dd:35:ef:35:fb:bc:b4:67:da:
2f:95:00:dc:d5:11:46:3e:5d:1c:8f:b2:79:c5:60:09:57:cb:
2a:47:67:4c:a9:dc:45:db:83:c6:14:ab:05:ef:e4:e7:86:bd:
7c:df:ab:03:79:cb:15:b4:05:12:28:1a:90:e9:64:a9:b3:2e:
1b:57:e5:21:08:d7:df:1c:10:dc:b9:a5:1f:14:fe:45:82:3e:
42:fb:f5:01:7c:fe:06:8c:21:aa:d1:c6:35:94:00:09:69:ba:
8e:94:19:75:7e:fb:0b:8c:31:f1:eb:7a:e3:88:b6:8a:e3:3d:
ea:56:dd:77:73:fe:6b:39:b4:27:f9:a1:6f:35:55:5e:8a:b2:
79:5e:b6:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:41:55 2025 by rpki-client